Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 12:42

General

  • Target

    18dbb46c6b2ab18e1ca83faaceeb0d8d.pdf

  • Size

    91KB

  • MD5

    18dbb46c6b2ab18e1ca83faaceeb0d8d

  • SHA1

    127bbc0d0ceb5a908402c63c08d1ca5ab2c76c0f

  • SHA256

    0876a3cbec12ceaa7a7493c41319d60db80282ed6cf5ffe837c91843dadf28c6

  • SHA512

    41e20e1c6a722b216495d05ee7806c498494641216f8ee3c1e2ae17cf7729f5dd9d7aadade3a6a27ddd546c0486fffd7980a48eb93c2519faf7b9583009f03f1

  • SSDEEP

    1536:O5ggBGzAXenxY+HYvyZs/LIl9KsLcmAi6HUgLrBuSYyCD1jWOpOaZEWg4TkFRyGk:mg3z4IY8YLQ9KsLcmAiBgLQh50aZc4Tf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\18dbb46c6b2ab18e1ca83faaceeb0d8d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    43f2b014e6157cf0346050d4eb75713f

    SHA1

    6504cc48036deb91522d49ae964a02f4d45e9b44

    SHA256

    34df46c0ce6c276681d18946e2b4324cb3d71cafe9843d58c2b83a9f3fd655ab

    SHA512

    5d6f8f248331913667a4e08251a220e1f384a99711ffc51733df58bb416270f3008c2fbd694b4fd35ba44d20c08b05b30dc036afa25cf95e2c8c4659d3bda8fa